use explicit /app/logout URL on log out

For some reason, only in the Chrome extension, this was generating
URLs like /logout instead of /app/logout. Investigate later.
remove flash messages from site template