It looks like this is an issue with basic authentication. Browser keeps the credentials even after logging out, so if you click "Sign In: Basic" it will log you back in without entering the credentials.

One way to solve it would be to make the logout link something like https://:@domainname/signout, which forces the browser to store wrong credentials (I used asterisks but it could be anything)