Group __toString
put whole site before firewall, unify login logout path