Implement /logout and /user