new login form, adding logout