Logout should be possible without destroying the whole session (optionally).