remove profile and token at logout

`auth.isAuthenticated` = true, if we don't reset this items (specifically `token`)