properly reference root URL for login and logout links