fixed logout now that we've moved to JWT tokens