logout, auth check, route group, remember token