How to destroy JWT token when signout