various improvements to login and logout

- login page now owned by individual services
- support multiple service upstreams