need to clear session data on logout
adjust ui handling of 2-factor auth