Implement logout

When the user clicks the Logout link, send a DELETE request to
/api/sessions/:id and redirect to the `login` route.