changed logout route to DELETE