logout redirects to referer