authenticates pw @ signin
can log in and out