title: django rest framework - token authentication logout
body: <p>I have implemented the Token Authentication according to the <a href="http://www.django-rest-framework.org/api-guide/authentication/#tokenauthentication">django rest framework Docs</a>. </p>
  
  <p>Form what I read,  the Token Authentication of DRF is quite simple - one token per user, the token doesn't expire and is valid for use always (<strong>am I right?</strong>).</p>
  
  <p>I understand that there are better practices out there, but for now the DRF token authentication is fine for me. </p>
  
  <p><strong>my question is-</strong> what is the best practice for <strong>logout</strong> with the normal DRF token authentication?</p>
  
  <p>I mean, when the user <strong>logs out</strong>, should I delete the token from the client side? and then on <strong>login</strong> get the token again? should I delete the token and generate a new one?</p>
  
  <p>Anyone with experience with this?</p>