sign_out via GET /users/sign_out