users can do all the signing in and out, just need to clean up