use HttpServletRequest.logout to remove authentication data for all containers to properly logout

(cherry picked from commit f64a1e4e50c7c8487fda31ed88c7cb2d86f3fbe5)