#22 - only call tokenServiceClient.releaseUserToken once in logoutaction.