fix the logout
clear query strings in controllers that are publically available