users can log in and log out with appropriate redirections