session()->invalidate(); // 3. Regenerate the CSRF token for security $request->session()->regenerateToken(); // 4. Redirect them back to the login page return redirect('/login'); } }