The /logout/ page currently triggers a login requirement unnecessarily. If there is no user, it should just silently do a redirect to the front page.