Right now when you sign out, we leave behind a login forever:

I think we should delete your login on the server as the last thing we do before signing out. We might also expire them after like 30 days of inactivity (or even less: I think it's important not sign you back in if you are active, but if you are inactive for a while I think it's ok to ask you to sign back in).