actually log out the user in Django