Use link_to.
Do not check permissions on extlogin/logout.

Addressing https://github.com/theforeman/foreman/pull/958#issuecomment-26486270 point 2.