[curtain]

I think you hand them over regardless, the logout is to render them invalid.

I wonder how many sites neglect that part.