allow logout via window / iframe