FIX: logout with stale token