users can now login and logout