use logout in accordiance with W3C draft for Form HTTP Extensions as of 2014-05-29
in the hope some browsers may respect this soon to clear HTTP basic auth credentials if not respecting 401...
see http://www.w3.org/TR/form-http-extensions/