[FIX] potential bug with the /login url, it could not possibly work due to its authorization level.
Also modified a function that is supposed to redirect to the backend and was still using '/'.
[FIX] session destroy

Sorry all