session handling 
logout button