user login_out generally working