User: log_in, log_out views, clean up allow()