single-sign-out (PART-I)