Comment by pbreit

OP’s point was that logout should not be implemented with a link/GET but instead with a button/POST for exactly this reason.