Logout should always succeed, even with invalid session

refs #10