authentication,log-in/log-out,  role evaluation