login/logout flow
User scaffold