add user login/logout authentication