login and logout web routes [#538]