handle log in/out, rsvp only when logged in