user can login and out and be directed to the correct views