remove profile and token at logout

`auth.isAuthenticated` = true, if we don't reset this items (specifically `token`)
and it stays logged out even while clicking logout