fixing logout, must check request