login logout and get token