`Client.logout()` also clears any `force_authenticate`

Closes #2218.