pub fn session_end_headers(target: &'static str) -> HeaderMapExpand description
Ends the session: expires all three cookies and redirects. Shared by logout and the password change, which revokes the very token that made its request and so must not leave the caller on a page whose every fetch now 401s.