Login logout

all specs passing, user can login and logout