fixing bug #5043
when HTTP destination is not defined, user session is no more invalidated.
Now, user is redirected to 'error404' page.