fixed login redirect, logout