/v1/logout on POST not GET