successfully implemented logout server-side, still need to delete token client-side.