limit logout function to logged in users

backend/index.js

@@ -165,11 +165,6 @@ app.post("/API/user/login", passport.authenticate('local-login'), function (req,
     return res.status(status.OK).send("login success");
 });
 
-app.delete("/API/user/logout", function (req, res) {
-    req.logout();
-    return res.status(status.OK).send("logout success");
-}); !!
-
 app.put("/API/user/create", function (req, res) {
     let { email, password } = req.body;
     if (email && password) {
@@ -199,6 +194,11 @@ app.get("/API/testlogin", function (req, res) {
     return res.status(status.OK).send(req.user["email"]);
 });
 
+app.delete("/API/user/logout", function (req, res) {
+    req.logout();
+    return res.status(status.OK).send("logout success");
+});
+
 app.get('/API/day', function (req, res) {
     const kind = parseInt(req.query.kind);
     if (Number.isInteger(kind)) {