refreshless user logout

fixes #2842
- new Ember route for signout
- new API route to allow async signout