bugfix: user logout