logout should not require a logged in user