wip: logout and changepassword functionality works. TODO: arrange functionaltity to separate controllers