implement proper jwt logout

[codelastnight]

as seen here, https://medium.com/devgorilla/how-to-log-out-when-using-jwt-a8c7823e8a6

its hard to logout with jwt. we could backlog a proper blacklist for logged out users,

• you can't delete cookies bc js is not allowed access to it.