note to self: logout fails with a json accept header?