SEC-2271: LogoutConfigurer#logoutUrl explains about CSRF