logout
check auth