provide routes to log the user in when authenticated and log out