logout works, need to understand passport