login and logout is ok