Delete login token from database on logout.
Add test for deleting login tokens on logout.
Store login tokens on the server per connection.

This way the client doesn't have to specify the token on logout.