Roll back signout.php changes and move the fix to auth.php, since checking $_SESSION...