implement simple auth
add login/logout to default layout