[1.8.x] Fixed DoS possiblity in contrib.auth.views.logout()

      Thanks Florian Apolloner and Carl Meyer for review.

This is a security fix.