fixed login, logout still need fix timeout