login & logout url api are same