login, logout and redirects to isauth