user login/logout api ends