Remove the validation token and the http post requirement from the logoff action.