find user by both email and auth token
change logout api endpoint from DELETE to POST.

HTTP DELETE requests don't allow payloads in java on android