You should probably send some sort of HTTP header that the client can detect that signs them out. Otherwise, Persona and their user token will be out of sync