added login/logout capability - usage requires login