Add user logout, restrict access