bugfix: skip require_login for log_out