refactor logout path to delete instead of get