update backend to have user login, logout, password auth, etc.