fix logout()