set auth_toke to null instead of empty string on logout