// POST /cms/auth/logout — invalidate the current session token server-side.
import "auth" as auth;
let t = auth::bearer_token(ctx);
if t != () { try { users::logout(t); } catch(e) {} }
#{ statusCode: 200, body: #{ ok: true } }