remove access token as well in logout