add logout endpoint