users can log in
users can log out; flash messages on log in/out; navbar links are login dependent