logout not in app.util