Log user out by invalidating authorization token