login auth functionality, logout action