diff --git a/.tool-versions b/.tool-versions
index e2a1032..ce94088 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -1 +1,2 @@
 nodejs 23.3.0
+ruby 4.0.2
diff --git a/games/tests.py b/games/tests.py
index eff03f0..f26bfff 100644
--- a/games/tests.py
+++ b/games/tests.py
@@ -23,7 +23,7 @@ def test_no_games(self):
         response = self.client.get(reverse("games:index"))
         self.assertEqual(response.status_code, 200)
         self.assertContains(response, "No games are available.")
-        self.assertQuerysetEqual(response.context["games"], [])
+        self.assertQuerySetEqual(response.context["games"], [])
 
     def test_one_game(self):
         """
@@ -33,7 +33,7 @@ def test_one_game(self):
         response = self.client.get(reverse("games:index"))
         self.assertEqual(response.status_code, 200)
         self.assertContains(response, "Test Game")
-        self.assertQuerysetEqual(response.context["games"], [game])
+        self.assertQuerySetEqual(response.context["games"], [game])
 
     def test_many_games(self):
         games = [
@@ -42,7 +42,7 @@ def test_many_games(self):
         response = self.client.get(reverse("games:index"))
         self.assertEqual(response.status_code, 200)
         self.assertContains(response, "Test Game 0")
-        self.assertQuerysetEqual(response.context["games"], games)
+        self.assertQuerySetEqual(response.context["games"], games)
 
     def test_many_games_some_not_ingested(self):
         games = [
@@ -55,7 +55,7 @@ def test_many_games_some_not_ingested(self):
         response = self.client.get(reverse("games:index"))
         self.assertEqual(response.status_code, 200)
         self.assertContains(response, "Test Game 0")
-        self.assertQuerysetEqual(response.context["games"], games)
+        self.assertQuerySetEqual(response.context["games"], games)
 
 
 class GameDetailViewTests(TestCase):
@@ -159,10 +159,15 @@ def test_ingest_setup_pages(self):
         results = game.vector_store.index.similarity_search("Setup instructions")
 
         self.assertEqual(len(results), 3)  # Both pages - plus a setup page
-        self.assertEqual(results[0].metadata["page"], 1)
-        self.assertEqual(results[0].metadata["game_id"], game.id)
-        self.assertEqual(results[0].metadata["document_id"], document.id)
-        self.assertTrue("Page 2" in results[0].page_content)
+        self.assertTrue(
+            any(
+                result.metadata["page"] == 1
+                and result.metadata["game_id"] == game.id
+                and result.metadata["document_id"] == document.id
+                and "Page 2" in result.page_content
+                for result in results
+            )
+        )
 
 
 class GameVectorStoreTest(TestCase):
diff --git a/poetry.lock b/poetry.lock
index 19635d4..8ecd2b0 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -511,18 +511,18 @@ files = [
 
 [[package]]
 name = "django"
-version = "4.2.23"
+version = "5.2.13"
 description = "A high-level Python web framework that encourages rapid development and clean, pragmatic design."
 category = "main"
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.10"
 files = [
-    {file = "django-4.2.23-py3-none-any.whl", hash = "sha256:dafbfaf52c2f289bd65f4ab935791cb4fb9a198f2a5ba9faf35d7338a77e9803"},
-    {file = "django-4.2.23.tar.gz", hash = "sha256:42fdeaba6e6449d88d4f66de47871015097dc6f1b87910db00a91946295cfae4"},
+    {file = "django-5.2.13-py3-none-any.whl", hash = "sha256:5788fce61da23788a8ce6f02583765ab060d396720924789f97fa42119d37f7a"},
+    {file = "django-5.2.13.tar.gz", hash = "sha256:a31589db5188d074c63f0945c3888fad104627dfcc236fb2b97f71f89da33bc4"},
 ]
 
 [package.dependencies]
-asgiref = ">=3.6.0,<4"
+asgiref = ">=3.8.1"
 sqlparse = ">=0.3.1"
 tzdata = {version = "*", markers = "sys_platform == \"win32\""}
 
@@ -2890,4 +2890,4 @@ cffi = ["cffi (>=1.17)"]
 [metadata]
 lock-version = "2.0"
 python-versions = ">=3.11.6,<3.15"
-content-hash = "b46823a615104cb500609274a7a4ef4ad8b8cfb14443b8239f00911f796f8b9e"
+content-hash = "248ea80d6cae543022074d5ffbc7a0ac161c5b6e1a211a8532c42b04db5a3a45"
diff --git a/pyproject.toml b/pyproject.toml
index c0c38ee..9b3ce19 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -7,7 +7,7 @@ readme = "README.md"
 
 [tool.poetry.dependencies]
 python = ">=3.11.6,<3.15"
-Django = "^4.2.4"
+Django = "^5"
 pypdf = "^3.15.0"
 langchain = "^0.3.0"
 openai = "^1.0"
diff --git a/rulesbot/settings.py b/rulesbot/settings.py
index 449158e..77e503d 100644
--- a/rulesbot/settings.py
+++ b/rulesbot/settings.py
@@ -154,7 +154,14 @@
 AWS_SECRET_ACCESS_KEY = env("AWS_SECRET_ACCESS_KEY")
 AWS_STORAGE_BUCKET_NAME = env("AWS_STORAGE_BUCKET_NAME")
 
-DEFAULT_FILE_STORAGE = "storages.backends.s3boto3.S3Boto3Storage"
+STORAGES = {
+    "default": {
+        "BACKEND": "storages.backends.s3boto3.S3Boto3Storage",
+    },
+    "staticfiles": {
+        "BACKEND": "django.contrib.staticfiles.storage.StaticFilesStorage",
+    },
+}
 
 MEDIA_URL = "/mediafiles/"
 MEDIA_ROOT = os.path.join(BASE_DIR, "mediafiles")
diff --git a/templates/master.html b/templates/master.html
index 51c9fd2..fb70204 100644
--- a/templates/master.html
+++ b/templates/master.html
@@ -74,7 +74,12 @@
             {% if user.is_authenticated %}
               <li><a class="nav-link" href="{% url 'chat:sessions' %}">Rules Chat Sessions</a></li>
               <li><a class="nav-link"  href="{% url 'users:account' %}">Manage Account</a></li>
-              <li><a class="nav-link"  href="{% url 'users:logout' %}">Log out</a></li>
+              <li class="nav-item">
+                <form method="post" action="{% url 'users:logout' %}" class="d-inline">
+                  {% csrf_token %}
+                  <button type="submit" class="nav-link border-0 bg-transparent">Log out</button>
+                </form>
+              </li>
             {% else %}
               <li class="nav-item">
                 <a href="{% url 'users:login' %}" class="btn btn-sm  bg-gradient-primary mb-0 me-1" role="button">Sign in</a>
diff --git a/users/templates/users/account.html b/users/templates/users/account.html
index 7d5d429..651e2e3 100644
--- a/users/templates/users/account.html
+++ b/users/templates/users/account.html
@@ -78,7 +78,10 @@ <h3>Manage Account</h3>
                         <div class="mt-4">
                             <a href="{% url 'users:change-password' %}" class="btn bg-gradient-info">Change Password</a>
                             <br>
-                            <a href="{% url 'users:logout' %}" class="btn bg-gradient-danger">Log out</a>
+                            <form method="post" action="{% url 'users:logout' %}" class="d-inline">
+                                {% csrf_token %}
+                                <button type="submit" class="btn bg-gradient-danger">Log out</button>
+                            </form>
                         </div>
                     </div>
                 </div>
diff --git a/users/templates/users/change_password.html b/users/templates/users/change_password.html
index aa0cc9b..38d21ee 100644
--- a/users/templates/users/change_password.html
+++ b/users/templates/users/change_password.html
@@ -15,7 +15,7 @@ <h3 class="text-white mb-0">Changing password for {{ user.username }}</h3>
                         <h3 class="text-warning">Change Password</h3>
                         <form action="{% url 'users:change-password' %}" method="post">
                             {% csrf_token %}
-                            {{ form }}
+                            {{ form.as_div }}
                             <input type="submit" class="btn bg-gradient-warning" value="Change Password" />
                         </form>
 
diff --git a/users/templates/users/login.html b/users/templates/users/login.html
index 16826e0..556809f 100644
--- a/users/templates/users/login.html
+++ b/users/templates/users/login.html
@@ -16,7 +16,7 @@ <h3 class="font-weight-bolder text-info text-gradient">Welcome back</h3>
                         <div class="card-body">
                             <form action="{% url 'users:login' %}" method="post">
                                 {% csrf_token %}
-                                {{ form }}
+                                {{ form.as_div }}
                                 <div class="form-check form-switch">
                                     <input class="form-check-input" type="checkbox" id="rememberMe" checked="">
                                     <label class="form-check-label" for="rememberMe">Remember me</label>
diff --git a/users/templates/users/sign_up.html b/users/templates/users/sign_up.html
index ccde783..3eac6e5 100644
--- a/users/templates/users/sign_up.html
+++ b/users/templates/users/sign_up.html
@@ -16,9 +16,8 @@ <h3 class="font-weight-bolder text-primary text-gradient">Join us today!</h3>
                         <div class="card-body">
                             <form action="{% url 'users:sign-up' %}" method="post" onsubmit="gtag('event', 'sign_up_form_submit', {'event_category': 'Sign Up', 'event_label': 'Form Submitted'});">
                                 {% csrf_token %}
-                                {{ form }}
+                                {{ form.as_div }}
                                 <div class="text-center">
-                                    <form id="signUpForm" >
                                     <input
                                         type="submit"
                                         class="btn bg-gradient-primary w-100 mt-4 mb-0"
diff --git a/users/tests.py b/users/tests.py
index 23506e9..1c203f1 100644
--- a/users/tests.py
+++ b/users/tests.py
@@ -42,7 +42,9 @@ def test_post_signup_page_with_existing_username(self):
         )
         self.assertEqual(response.status_code, 200)
         self.assertTemplateUsed(response, "users/sign_up.html")
-        self.assertFormError(response, "form", "username", "Username already exists")
+        self.assertFormError(
+            response.context["form"], "username", "Username already exists"
+        )
 
     def test_post_signup_page_with_existing_email(self):
         User.objects.create_user(
@@ -59,7 +61,7 @@ def test_post_signup_page_with_existing_email(self):
         )
         self.assertEqual(response.status_code, 200)
         self.assertTemplateUsed(response, "users/sign_up.html")
-        self.assertFormError(response, "form", "email", "Email already exists")
+        self.assertFormError(response.context["form"], "email", "Email already exists")
 
     def test_post_signup_page_with_non_matching_password(self):
         response = self.client.post(
@@ -74,7 +76,7 @@ def test_post_signup_page_with_non_matching_password(self):
         self.assertEqual(response.status_code, 200)
         self.assertTemplateUsed(response, "users/sign_up.html")
         self.assertFormError(
-            response, "form", "confirm_password", "Passwords do not match"
+            response.context["form"], "confirm_password", "Passwords do not match"
         )
 
     def test_signup_user_cannot_access_admin(self):
@@ -142,18 +144,18 @@ def test_get_account_page_after_login(self):
         response = self.client.get("/users/account")
         self.assertEqual(response.status_code, 200)
 
-    def test_get_logout_page(self):
-        response = self.client.get("/users/logout")
+    def test_post_logout_page(self):
+        response = self.client.post("/users/logout")
         self.assertEqual(response.status_code, 302)
         self.assertRedirects(response, "/")
 
-    def test_get_logout_page_after_login(self):
+    def test_post_logout_page_after_login(self):
         User.objects.create_user(username="testuser", email="test", password="test")
         self.client.login(username="testuser", password="test")
         response = self.client.get("/users/account")
         self.assertEqual(response.status_code, 200)
 
-        response = self.client.get("/users/logout")
+        response = self.client.post("/users/logout")
         self.assertEqual(response.status_code, 302)
         self.assertRedirects(response, "/")
 
@@ -201,7 +203,9 @@ def test_post_change_password_page_with_wrong_current_password(self):
         )
         self.assertEqual(response.status_code, 200)
         self.assertTemplateUsed(response, "users/change_password.html")
-        self.assertFormError(response, "form", "current_password", "Incorrect password")
+        self.assertFormError(
+            response.context["form"], "current_password", "Incorrect password"
+        )
 
     def test_post_change_password_page_with_non_matching_passwords(self):
         User.objects.create_user(username="testuser", email="test", password="test")
@@ -217,8 +221,7 @@ def test_post_change_password_page_with_non_matching_passwords(self):
         self.assertEqual(response.status_code, 200)
         self.assertTemplateUsed(response, "users/change_password.html")
         self.assertFormError(
-            response,
-            "form",
+            response.context["form"],
             "confirm_new_password",
             "Passwords do not match",
         )
diff --git a/users/urls.py b/users/urls.py
index 1f6f526..45f640b 100644
--- a/users/urls.py
+++ b/users/urls.py
@@ -1,4 +1,3 @@
-from django.contrib.auth.views import LogoutView
 from django.urls import path
 
 from . import views
@@ -10,5 +9,5 @@
     path("login", views.login_view, name="login"),
     path("account", views.account_view, name="account"),
     path("change-password", views.change_password_view, name="change-password"),
-    path("logout", LogoutView.as_view(), name="logout"),
+    path("logout", views.logout_view, name="logout"),
 ]
diff --git a/users/views.py b/users/views.py
index 73f2abb..f6c9284 100644
--- a/users/views.py
+++ b/users/views.py
@@ -1,7 +1,8 @@
-from django.contrib.auth import authenticate, login
+from django.contrib.auth import authenticate, login, logout
 from django.contrib.auth.models import User
 from django.shortcuts import redirect, render
 from django.urls import reverse
+from django.views.decorators.http import require_POST
 
 from users.forms import ChangePasswordForm, LoginForm, SignupForm
 
@@ -115,3 +116,9 @@ def change_password_view(request):
     return render(
         request, "users/change_password.html", {"user": request.user, "form": form}
     )
+
+
+@require_POST
+def logout_view(request):
+    logout(request)
+    return redirect("/")