1. add logout function.
2. update jsp with header