added user login/logout passwd routines, not completely unit-tested