add header with user login/logout,

implement logout api.