Make current_user report the user right after the login call
Make logout idempotent (not throwing errors if already logged out)