handling missing credentials gracefully

perform normal login with dummy values to prevent timing attacks ;-)
showing login error
added logout controller
added LogoutController test
navbar shows items depending on login status

- user is logged in: show Logout and Your Basket
- user is not logged in: show Login