working: login, auth, and redirects | not working: logout