Can we make an endpoint on the api to delete the session token on the server side too?

Originally posted by@Emyrk in#1692 (comment)

We should be calling this when logging out via CLI and via the browser. Adds more security to the sign out flow and invalidates the current session token not allowing it to be reused in cases like the cookie being sniffed.