Add logout endpoint

Create a logout endpoint invalidating the session and removing the firebase-token.

Since firebase-tokens are assigned to a specific device, not a specific user, users (B) may receive other users (A) push notifications after logging out from account A and logging in with account B. Calling this this logout endpoint will prevent user B receiving user A's push notifications even though the firebase-token has not been changed.