add session logout to client
refactor client controllers to inject services
remove login controller
update user get routes