require auth and adding logout