flesh out login FT, add a logout URL