added logout feature
revised return url after logout
1. modified signup servlet, switch username to lowercase
2. finish login validation