add logout; authenticated now on model