use default logout handler instead of custom one since no other process to perfrom other than invalidate session