user can sign up, in and out