Don't allow cookie authentication on login API
Add Logout API handler