login and logout both working