do not use HttpResponseRedirect for logout api