add a target page with logout/change password (instead of secure/test) #9