Change logout to POST

CSRF requires a POST on the logout

However still a bug as the csrf token is not correct. Not sure why.