change logout route to 'delete' method