I thought that we said that we don't need to logout as the user shouldn't be logged when requesting a password reset.