add login and logout to routes