added login and logout system using auth object incl. csrf support