#35 : support REST logout

by allowing no "defaultFailureUrl". so there will be no redirection.
git ignores