logout, authorization using cookie