Why use the session to store the logout URL here, while the expiry path instantiates an SSO object to get an expiry URL?  Looks to me like the two techniques should be the same.  I prefer the SSO object method.