should only see logout if logged in