Add logout route and controller method