bugfix: send logout back to / not index.html