logout link now actually goes to /logout