I agree with @aaugustin, it seems like this should be `auth.logout`. We should avoid code that incidentally logs a user out without calling `auth.logout`, as is done here.