Logging out forces a redirect to HTTPS

[flashadvocate]

Probably need to gracefully handle security-agnostic URL prefix, since it's unlikely someone is going to go to the trouble of securing their local vhost, even with a self-signed cert.