@DELETE
 public Response logout(
     @Context HttpServletRequest request, @Context HttpServletResponse response) {
   // if session does not exist try and catch
   sessionHelper.setRequest(request);
   sessionHelper.getSession().invalidate();
   return Response.status(204).build();
 }