*** Invalidate session on logoff (optional, true by default)