Most controllers are passwords-protected. Needs to handle password protected vs non password protected parts of the website better when public users come up.
FIX: logout works now.