Logout link generates cross site scripting warning