Use window.location.href instead of navigateTo for API route to ensure proper server-side logout handling.