added logout feature (NOTE: this is a vulnerable) fixes #2