added login/logout routes