public function logout(Request $req, Response $res)
{
    session_unset();
    session_destroy();
    $res->redirect(BASE_PATH . '/login');
}