The HttpDigest auth module will always call the url `logoutURL` when logout is called. This isn't strictly necessary and we need to provide a way to disable it.