login: strip logout parameter on form post