ecurity improvement: jAuth::logout() can destroy the session if session_destroy=on in the configuration

Did also refactoring on the code about persistant cookie