added server side login and logout routes