added user login out via JSON