bugfix: force logout if there is only MW session user: prevent incostintent state when there's no Shib session
