login, logout, api references and session management