added route to logout patient, removed access token from patient #30