logout url was wrong