-logout page added (csrf support)