Don't set the REMOTE_USER for unauthenticated users - force logout