add logout, admin page, sec check