MODE-2342: Remove lock tokens from sessions upon logout().

When a session ends (via logout()) any lock tokens held by that session were left in a state where they couldn't be associated with another session (or removed from the terminated session).

This small change (and illustrative test) changes that behavior in a way that is not inconsistent with the JCR spec and simplifies use of locks in sessions.
Ah, I understand. We're using non-session scoped locks so we can transfer locks between sessions (which we can't do if they're exclusive to a session anyway)