vid 51 & 52:
protected controllers and views
added logout function