Implement user login/logout, remove ssl