fixed logout, change password