some notes on security logging added
can logout user