Adding log out button, and testing access via Mr Anonymous' refresh token => only works once :(