Should be BaseApiHandler. According to the api spec, we return {"status": "LOGGED_OUT"} if not login.