Expand access token controller to handle logout
Add logout to default layout
Link logout to access_token#destroy