you need to send your cookie in header with v2/logout api to get your xcsrf token from response header