user.login.log_out_other policy might not logout authenticated users