use HttpServletRequest.logout to remove authentication data for all containers to properly logout