add auth flow
user login/logout