add logout to service and remove the $http API from the controller altogether