logoff, then clear device token