login works, logout works