Clarify specification by adding `/logout` to the overview list of endpoints that don't take a JSON request body.