#1: login/logout added, menu adjustment based on role, api securing