logout: clear user var to prevent disallowed edit option