Move the anti-referrer login to only logout
Move the anti-referrer login to only logout

This has no functional difference, just a cosmetic
difference that does not give the erroneous impression
a logout actually occurred.  This does mean that if a browser
disables cookies and uses the api explorer, there would
be an opportunity for a CSRF.

xcat2/confluent,jjohnson42/confluent,jjohnson42/confluent,jjohnson42/confluent,whowutwut/confluent,whowutwut/confluent,whowutwut/confluent,xcat2/confluent,whowutwut/confluent,xcat2/confluent,xcat2/confluent,jjohnson42/confluent,jjohnson42/confluent,xcat2/confluent