diff --git a/app/Config/Routes.php b/app/Config/Routes.php
index 8450de0..e65dbbf 100755
--- a/app/Config/Routes.php
+++ b/app/Config/Routes.php
@@ -24,6 +24,7 @@ $routes->group('api', ['filter' => 'appSignature'], function ($routes) {
   $routes->post('auth/login', 'AuthController::login');
   $routes->get('auth/oauthClient', 'AuthController::oauthClient');
   $routes->post('auth/oauthlogin', 'AuthController::oauthlogin');
+  $routes->get('auth/logout', 'AuthController::logout');
 
 
   // MS OAuth api's
@@ -43,7 +44,7 @@ $routes->group('api', ['filter' => 'appSignature'], function ($routes) {
 
 $routes->group('api', ['filter' => ["jwtAuth:Org Admin,Travel Admin,Travel Agent,User","appSignature"] ], function ($routes) {
 
-  $routes->get('auth/logout', 'AuthController::logout');
+
 
   $routes->get('downloadPassport', 'UserController::downloadPassport');
 
diff --git a/app/Controllers/AuthController.php b/app/Controllers/AuthController.php
index dd5ddea..22dda04 100644
--- a/app/Controllers/AuthController.php
+++ b/app/Controllers/AuthController.php
@@ -424,17 +424,17 @@ class AuthController extends ResourceController
     
         if (!$user) {
             return $this->respond([
-                'status'  => 400,
+                'status'  => 404,
                 'message' => 'User not found or inactive'
-            ], 400);
+            ], 404);
         }
     
         // Check token match
         if ($user['current_token'] !== $token) {
             return $this->respond([
-                'status'  => 401,
+                'status'  => 200,
                 'message' => 'Unknown login or invalid token'
-            ], 401);
+            ], 200);
         }
     
         // Token matches — logout success