app full scope by default
relative logout
migration doc