Changing `/logout` such that it works without being a protected route