The main handler makes sense to me: it would be the current ```SingleSignOutHandler``` with encapsulated logic, but I still think that "inner handlers" will make the source code complicated without obvious gain...

As we haven't been able to reach some agreement, I propose to do this first step (encapsulate logic) in a new commit and then restart discussion before any merge. Agreed?