fixed a bug where the url parameter to logout was required even when showing a logged out page