Fix EZP-22751: DELETE /user/sessions/<id> does not remove the session cookie

https://jira.ez.no/browse/EZP-22751

Added proper use of configured logout handlers + implemented one dedicated to REST to force session cookie clearing.