Check if there is a signed in user before sign out.

Only execute the `SessionsController#destroy` if there is a signed in
user, otherwise it will raise
`ActionController::InvalidAuthenticityToken`.

Fixes #2934.
Merge pull request #2968 from plataformatec/sign_out_not_logged_in_user

Check if there is a logged user before logout.