login/logout/signin is totally functional