fix logout security breach