logout when auth.protected fail