logout
use separate route for login