Refs #24, adds a logout script.

Also unsets session cookies upon user deletion. The $AUTH_TOKEN variable
now whitelists hex characters, so it is more safe to use in SQL queries.