login and logout no longer change URLS