initial logging in; no actual authentication yet
initial logging out; no authentication yet