public IActionResult Logout() { if (!userLogin.HasLogin()) { throw new Exception("access prohibited"); } userLogin.Clear(); return(Redirect("/")); }