api working / need to check login - logout