Added support for ID Site Logout

Ah - what if they're already logged in and then immediately redirected back to the origin application.  There is no active authentication - only that they've authenticated previously.  `onAuthenticated` feels as if the end-user actively authenticated right then and there.