Replace sign out links with sign out buttons.

Using `button_to` instead of `link_to` for DELETE requests removes an
unnecessary dependency on JavaScript.