REST logout without logout_token
Marius,

When you login using rest api, csrf and logout tokens are generated. use the logout_token generated to logout form your app. Make a post request to 

/user/logout?_format=json&amp;token={logout_token}


Sample code to logout from your app will be similar to 

 var xhr = new XMLHttpRequest();
 xhr.withCredentials = true;

 xhr.addEventListener("readystatechange", function () {
   if (this.readyState === 4) {
     console.log(this.responseText);
   }
 });

 xhr.open("POST", "http://example.com/user/logout?_format=json&amp;token=logout_token");
 xhr.setRequestHeader("content-type", "application/json");

 xhr.send(data);


Hope that helps.