log out in app.js