logout = async userId => {
  // Note: we don't use this function directly because it is meant to keep some old style connection active
  // this means storing the token and it's creation, Meteor does this on the server, but we don't allow state in the server anymore
  // we could store it in the client but this is tedious...
  //
  // We have a more aggressive strategy in Vulcan and simply delete the list of tokens
  //
  //const hashedToken = Accounts._hashStampedToken(stampedToken);
  //await Accounts.destroyToken(userId, hasedToken);
  await Accounts.users.update(userId, {
    $set: {
      'services.resume.loginTokens': [],
    },
  });
  return { userId };
}
Invalidate user's auth token

StampedToken = { when, token }
Method example:
@see https://github.com/meteor/meteor/blob/devel/packages/accounts-base/accounts_server.js#L523
Token destruction:
@see https://github.com/meteor/meteor/blob/devel/packages/accounts-base/accounts_server.js#L486