add login route
add logout route