login and logout works