add user 'kick' route to rest api;  changed login and logout routes to be more intuitive