Chap 8 - authentication scheme for signing up/in/out