fixed routes, logout