added logout route
adding login protection to routes