um.ctl.Login: logout if closed, cleanup backend session

for now sessions in browser cookies live until window/tab is closed