added feature: once user logs in, they remained logged in until they implictly log out