Add `removeToken` to `$auth`

* `removeToken` just deletes the token from localstorage
* Using `logout` causes a redirect, and having a `logoutRedirect` is a
nice thing to have. This prevents the need to have to set it to null.