Signing out doesn't fully implement Microsoft's protocol

[alexwaeseperlman]

We need to make a /api/logout endpoint that Microsoft can call when users log out (see here). If we plan on supporting multiple login providers we will need to store which one a user is logged into so we can follow the correct logout process.

[alexwaeseperlman]

Going to remove login with microsoft