sign in, sign out, and restrict access