user can now login and logout