add logout link
lets see if heroku lets us use https