users can log out
remove 'ajaxform' from login form; it breaks it and is unused