Better remote logged out experience

remotely signed-out users should be redirected
to signon without additional clicks, or realising
that they have been remotely signed-out.

also fixes the bug where a remotely signed-out user
has signed-in again but the downstream app doesn't
realise it.