There is now a complete lifecycle of initializing the system password,
logging in to the system, a logout confirmation form, and the actual
processing of a logout.  So the session lifecycle is complete for working
with the security system.

Now I need to work on the facilities for managing the security devices
for the user, which includes providing a list of the security devices
to the SecurityMainHtml page, with links for deleting the individual
security devices listed (with confirmation, of course), and an implementation
for adding new security devices.  Last but not least, one needs to be able
to select the default security device, as that's the public key that's going
to be used to deliver the encrypted emails to the user when they request
a password reset.