The {@link com.top_logic.base.accesscontrol.LoginPageServlet} is called from the login page. Logout is done by invalidating the {@link javax.servlet.http.HttpSession}.