fixed forms authentication not logging out