Function handle_close 

pub async fn handle_close(
    req: HttpRequest,
    state: Data<AppState>,
) -> HttpResponse

POST /api/close — revoke the bearer token (logout).