add login and logout routes