Add specs for logout endpoint