add login.php and logout.php