force_authenticate(None) also clears session info.

Closes #1055.