fix some other bugs of iam

apps/user-app/src/api/client.ts

@@ -359,6 +359,9 @@ export const api = {
       `/customer/auth/sso/logout-url?return_url=${encodeURIComponent(iamAppUrl(''))}`,
     ),
 
+  endSharedSession: () =>
+    request<{ ended: number }>('/customer/auth/logout', { method: 'POST', body: '{}' }),
+
   // The three reads below identify the customer by TOKEN. They replaced
   // /customers/:id, /:id/orders and /:id/ledger-entries, which took the id from
   // the URL and let anyone read anyone (SEC-08).