*** Option (true by default) to invalidate session on logoff