v1.0.8-alpha3: $logoutURL is now the HTTP_REFERER