set auth_token to null instead of empty string on logout