user can log in, no views