I don't know how Next make _rsc requests but it somehow make a request to /logout url as well after successful authentication.
In the /logout route handler i don't made a validate logic if incoming request has _rsc param so it just release the session.
Is it normal to make that requests? It seems It is related server component because of the naming. Should i make a validation logic every time in the route handler?