use https to sign out