logout has changed to using location.href