Interesting bug, we usually send an HTTP header back saying you have been logged out, but if that redirects and the client can not follow the redirect it is probably not getting the header.
@david can you add to your list to investigate this.
- Site requires login
- Site has SSO defined (you can point local at meta or something)
- You are on latest page
- You delete cookies
What should happen is we should pop up the dialog saying you were logged out. But maybe the redirect is throwing the internals off.