/user/logout now logs user out