fixed issue where logging out via ACP caused CSRF error