change from GET to POST /logout with _method=delete

change to using POST /logout with _method=delete