added logout endpoint - look good to go for auth