handle login/logout in user list