now properly tracking user logins