closes #3, closes #4, closes #6, closes #7
fixed logout operation to use POST instead of GET