Auth is under /api, fix to address #102.

When auth was removed from the routes, broke the logout
capability.  Fixed with this commit.