login and sign-out works now