set authenticated to false on logout