fix(auth): stop using expired auth token after logout