initial support for single logout in s2repoze