Fixed permissions to let non-ops use /logout