small modifications
e.g. logout of personal page.

todo: res.cookie() function not work.
             csrf