private callbacks && logout