fix logout URL -- the cookies are HTTP_ONLY so we can't delete with JS

See
http://ptspts.blogspot.com/2011/12/how-to-log-out-from-appengine-app-only.html