convention to login/logout uris