protected entry resource, plus loguout