added login and logout routes