added proper user fetching
updated logout.jsp to support new authentication