added need to post request in logout if using CSRF #134

added need to post request in logout if using CSRF #134