separate login, logout from user endpoint. Also cleaned up the login now only TokenAuthenticator is used and the Authenticator selector is not used any where