Fix #211, #217: Remove support for auto-login/logout.

Removes logout callbacks altogether, and updates the login callback to
only do anything if requestDeferred is set, which only happens when the
page calls getAssertion, effectively disabling automatic login and 
logout.