Turn logout link into a POST API call with refresh