can login but can't logout