added logout and make sure secured pages cannot be displayed w/o login