modified _header
sessions and authentication are OK
logout ok