login and logout now work