Bug in user logout api