shouldn't cando['logout'] be set to false in this case?