logout method added to remove X-Auth-Token