add login and logout route