invalidate login info