user able to log in and change status