#620: logout requests should contain logoutRequest Parameter

This pull fixes issue #620
does this need to be public?