move login, logout and profile to auth
fix auth.urls
cleanup imports