removed login/logout controller