add route logout and test