user key in header and logout