use session.clear for logout
protect from forgery with null session
Merge pull request #75 from mud-turtles-2014/logout

Logout