remove should not be used login/logout routes for the time being