forget token when visiting /logout/