Allow guests to sign out

Otherwise, a user's session cannot be voluntarily destroyed