Add support for external authentication logout

Each OAE authentication strategy can now expose a `logout` function
that will called when a user that authenticated with that strategy logs
out.

This has currently only been implemented for CAS.