let's move this to `/logout`