user api : add logout & update docs