removes users from _loggedInUsers on LoggedOut in Application

this prevents a bug where logging in replaces the User in another
session even if it's logged out, because it logged in and got added
to _loggedInUsers.