refreshless user logout

fixes #2842
- new Ember route for signout
- new API route to allow async signout

Something worth noting is that after logging out a user won't be able to immediately log back in yet because of the issue described in #2861.