Merge pull request #23 from geoffroh/master

Single sign out
Simplified some default_redirect_url code, fixed a spec
Changed tgt persistence back to request.cookie