Update signout for CSRF support

Previously signout was performing a GET which is no longer valid with the
default JC support.

Now signout performs a POST and includes a CSRF token.