misuzu/public/auth/logout.php

<?php
require_once '../../misuzu.php';

if (!user_session_active()) {
    url_redirect('index');
    return;
}

if (!empty($_GET['token']) && is_string($_GET['token']) && csrf_verify('logout', $_GET['token'])) {
    setcookie('msz_auth', '', -9001, '/', '', true, true);
    user_session_stop(true);
    url_redirect('index');
    return;
}

echo tpl_render('auth.logout');