final functioning routes, login, logout, and create user