a user can log in and out now