added logout routes to destroy user session and redirect back to login page