SessionExpiryPolicyMiddleware should logout user.

We were clearing the cache, but this won't actually log out the user. We
should call the logout function from contrib.auth which handles all the
work of logging out a user.