Bug fixes: logout should use get not post. Login should be based on email not username (for now anyway)