we know have login/logout and auth for users