Usually the client just removes the session and after a while it will expire, but we can make a logout:
Security/Login/{session} [DELETE]