added logout service to http, improved token handling messages