Finishing implementation of POST /logout + specs