logout() doesn't need to return anything, all it does is destroy the session and cookies.