As a workaround, you can comment out line #61 if the file app/Controller/AuthController.php, and hope that @creecros soon will fix the Customizer plugin.
EDIT: In case you cannot or don’t want to wait, you can download and use my patched version of Customizer-1.14.2 from here. This should solve the logout issue, but leaving the CSRF checking intact.