Add hash invalidation on logout

Add a LogoutHandler to use with Symfony security component to ban hash request when a user logout

see #68
why only varnish? we need ban, so the current nginx setup won't support it. but maybe it can at some point, or somebody implements support for something else. should we say "Your caching proxy needs to support BAN operations for this to work."?