add CAN_LOGOUT setting

On one of the servers, logging out isn't possible because auth is managed by shibboleth. So don't show the logout link if settings.CAN_LOGOUT is False.