moved login into a partial view and added logout action