Removed auth.logout call to auth/logout as it doesn't make sense in a stateless API