Bug fixed: logout does not invalidate session.