How do I logoff using Form-based-Login. My Logoff servlet invalidates the user's session but the user can still access protected resources without the container re-authenticating him.Logoff servlet attached.