Version 0.4.0

• Refactor with logger interface, compatible with go-pkgz/lgr
• Optional cache (interface) for refresh optimization
• Ensure logout on valid (logged in) users only
• Rejects expired tokens for non-cookie auth
• Add auth with token query param