fix session logout

auth/auth.go

@@ -74,12 +74,13 @@ func login(w http.ResponseWriter, r *http.Request) {
 }
 
 func logout(w http.ResponseWriter, r *http.Request) {
-	_, s := getSessionFromCookie(r)
+	sid, s := getSessionFromCookie(r)
 	invalidateSessionCookie(w)
 	if s == nil {
 		http.Error(w, "Request does not contain a valid session cookie or session is already expired.", http.StatusUnauthorized)
 		return
 	}
+	auth.sessions.remove(sid)
 	http.Error(w, "You are now logged out.", http.StatusOK)
 }