login/logout protected, adding parse_rest