fixed login, logout