add login/logout routes