using connect sessions middleware

- route filtering added
- logout added