Also, I recommend that you use a POST request to effect the logout. GET requests can be made at any time and should have no adverse side-effects.