return 204 NO CONTENT on API logout

That's the only meaningful response.