changed order of AUTHENTICATION_BACKENDS
updated flexauth
fixed bug that prevented logging out