users can now log out, log in and stuff. will deny if the combo is wrong