URI Routing - only allow custom route?

However, you can still access `auth/logout` if you know the URL exists.

* You can  put something in the constructor of the logout controller to catch this,
and redirect them before any of the methods can be called. Or you can do something similar in the index method if its easier.