fixed post request, added logout