I was thinking exactly about this but I thought it's more effective to store a path once and use it in every request (logout link is displayed on every page) than creating a SSO object just to ask for logout path. Then I moved the code to logout action which is of course called only when user logouts and I forgot about this. So a good catch, thank you, I'll update.