Merge pull request #295 from ljwolford/oauth2

Oauth2
moved login/logout out of xapi routes