Added a route for logout
Included the default security firewall settings for logout. Don't need these if they are the same though.
Swapped the user from being part of the form to being assigned in the controller
Swapped the login/logout link. Removed the user field from the forms. Only allowed answers to be posted when logged in.