Fix logout route

the logout request must use the method get instead of delete