added a logout function to wipeout auth_cookie and allow login as a different user