added session and logout routes