add private method
fixing logout route get to delete