added logout + session variables