fixed: login and logout