Fix logout.
We might fail to load the session token, but the JS cookie might still be there (and invalid). Let the JS client deal with it.