add authorization, can login but cannot logout - no logout link