Add `removeToken` to `$auth`

* `removeToken` just deletes the token from localstorage
* Using `logout` causes a redirect, and having a `logoutRedirect` is a
nice thing to have. This prevents the need to have to set it to null.

My use case is: On `401`'s, delete the token, show login modal, retry request.