change the logout to GET request