[Security] removed wrong assertion about logout route