fix bugs
email will be able to be changed in profile function
when session is destroyed, backend pages should be redirected to index