Delete username/password from session on logout

Then we can know that logged out sessions will have a nil username/password.
Merge pull request #20 from clehner/fix-empty-username2

Delete username/password from session on logout