Currently, logging out through UI navigates to /login via history.PushState
It does not call /auth/logout, and without clearing the refresh cookie

There is already a /auth/logout endpoint that clears cookies, but SPA never use it