cleanup
login redirects to user's page