form based login/logout now working properly