logout when token is invalid