Require auth for logout handler