Respond to code review feedback.

1. Call HttpServletRequest#logout() on SLO callback since it is available.
2. Use final for local variables where possible.