removed hardcoded authenticate/logout url.