Implement /logout endpoint

[dmitrizagidulin]

Implement /logout api endpoint / handler (removes the appropriate access & refresh tokens from the store, etc).

[dmitrizagidulin]

Also consider providing injectable behavior (like we do with authenticate() and obtainConsent()).
For the host to be able to do whatever they need to on signout (clear session cookie, etc).