User should be able to login/logout.