included login_url and logout_url