a simple login/logout with authentication