diff --git a/src/lib/components/app/auth-form/auth-form.svelte b/src/lib/components/app/auth-form/auth-form.svelte
index e851b1a..fa3fe09 100644
--- a/src/lib/components/app/auth-form/auth-form.svelte
+++ b/src/lib/components/app/auth-form/auth-form.svelte
@@ -6,25 +6,17 @@
 	let { class: className, ...rest }: {class: string | undefined | null, rest: { [p: string]: unknown }} = $props();
 
 	let isLoading = $state(false);
-	async function onSubmit() {
-		// event.preventDefault();
-		isLoading = true;
-
-		setTimeout(() => {
-			isLoading = false;
-		}, 3000);
-	}
 </script>
 
 <div class={cn("grid gap-6", className)} {...rest}>
-	<a href="/auth/authentik">
-		<Button disabled={isLoading} onclick={onSubmit}>
+	<form method="get" action="/auth/authentik">
+		<Button type="submit" onclick={() => {isLoading=true}}>
 			{#if isLoading}
 				<LucideLoaderCircle class="mr-2 h-4 w-4 animate-spin" />
 			{:else}
 				<img class="mr-2 h-4 w-4" alt="Authentik Logo" src="https://auth.cazzzer.com/static/dist/assets/icons/icon.svg" />
 			{/if}
-			Authentik
+			Sign in with Authentik
 		</Button>
-	</a>
+	</form>
 </div>
diff --git a/src/lib/server/auth.ts b/src/lib/server/auth.ts
index 8a36ee4..667c442 100644
--- a/src/lib/server/auth.ts
+++ b/src/lib/server/auth.ts
@@ -41,6 +41,10 @@ export async function invalidateSession(sessionId: string): Promise<void> {
 	await db.delete(table.session).where(eq(table.session.id, sessionId));
 }
 
+export function deleteSessionTokenCookie(event: RequestEvent) {
+	event.cookies.delete(sessionCookieName, { path: '/' });
+}
+
 export async function validateSession(sessionId: string) {
 	const [result] = await db
 		.select({
diff --git a/src/routes/+layout.server.ts b/src/routes/+layout.server.ts
new file mode 100644
index 0000000..0471612
--- /dev/null
+++ b/src/routes/+layout.server.ts
@@ -0,0 +1,9 @@
+import type { LayoutServerLoad } from "./$types";
+
+export const load: LayoutServerLoad = async (event) => {
+	const { user } = event.locals;
+
+	return {
+		user
+	};
+};
diff --git a/src/routes/+layout.svelte b/src/routes/+layout.svelte
index 95b05e8..b4569c8 100644
--- a/src/routes/+layout.svelte
+++ b/src/routes/+layout.svelte
@@ -1,13 +1,21 @@
 <script lang="ts">
 	import '../app.css';
-	let { children } = $props();
+	import { page } from '$app/stores';
+	import { cn } from '$lib/utils';
+
+	const { data, children } = $props();
+	const { user } = data;
 </script>
 
-<header class="p-4">
-	<h1 class="text-2xl font-bold">My App</h1>
-	<nav>
-		<a href="/">Home</a>
-		<a href="/about">About</a>
+<header class="p-4 md:flex">
+	<span class=" mr-6 font-bold xl:inline-block">My App</span>
+	<nav class="flex items-center gap-6 text-sm">
+		<a href="/" class={cn("hover:text-foreground/80 transition-colors",
+				$page.url.pathname === "/" ? "text-foreground" : "text-foreground/60")}>Home</a>
+		{#if user}
+			<a href="/user" class={cn("hover:text-foreground/80 transition-colors",
+				$page.url.pathname === "/user" ? "text-foreground" : "text-foreground/60")}>Profile</a>
+		{/if}
 	</nav>
 </header>
 <main class="flex-grow p-4">
diff --git a/src/routes/+page.server.ts b/src/routes/+page.server.ts
deleted file mode 100644
index a2aa7a5..0000000
--- a/src/routes/+page.server.ts
+++ /dev/null
@@ -1,9 +0,0 @@
-import type { PageServerLoad } from "./$types";
-
-export const load: PageServerLoad = async (event) => {
-	const { user } = event.locals;
-
-	return {
-		user
-	};
-};
diff --git a/src/routes/auth/+page.server.ts b/src/routes/auth/+page.server.ts
new file mode 100644
index 0000000..7f23ea4
--- /dev/null
+++ b/src/routes/auth/+page.server.ts
@@ -0,0 +1,14 @@
+import { fail, redirect } from "@sveltejs/kit";
+import { invalidateSession, deleteSessionTokenCookie } from "$lib/server/auth";
+import type { Actions } from "./$types";
+
+export const actions: Actions = {
+	logout: async (event) => {
+		if (event.locals.session === null) {
+			return fail(401);
+		}
+		await invalidateSession(event.locals.session.id);
+		deleteSessionTokenCookie(event);
+		return redirect(302, "/");
+	}
+};
diff --git a/src/routes/user/+page.svelte b/src/routes/user/+page.svelte
index cfaebc5..f27be59 100644
--- a/src/routes/user/+page.svelte
+++ b/src/routes/user/+page.svelte
@@ -1,8 +1,10 @@
 <script lang="ts">
 	import { invalidate, invalidateAll } from '$app/navigation';
 	import { Button } from '$lib/components/ui/button';
+	import { LucideLoaderCircle, LucideLogOut, LucideRefreshCw } from 'lucide-svelte';
 
 	let { data } = $props();
+	let isLoadingSignOut = $state(false);
 
 	function refetch() {
 		console.log("refetching");
@@ -19,5 +21,16 @@
 </p>
 
 <Button onclick={refetch}>
+		<LucideRefreshCw class="mr-2 h-4 w-4" />
 	Invalidate Data
 </Button>
+<form class="inline-flex" method="post" action="/auth?/logout">
+	<Button type="submit" onclick={() => {isLoadingSignOut = true}}>
+		{#if isLoadingSignOut}
+			<LucideLoaderCircle class="mr-2 h-4 w-4 animate-spin" />
+		{:else}
+			<LucideLogOut class="mr-2 h-4 w-4" />
+		{/if}
+		Sign Out
+	</Button>
+</form>