Hi,
as far as I know you don't have a chance realizing a real logout while using HTTP basic Authentication.
The reason is, that you don't have a session context at the server. Instead a browser keep your credentials in mind and submit them with each request.
So the only way will be closing the browser window(s).
The opsoro authentication mechanismn isn't production ready. Instead of using basic authentication someone have to write a getLoginTicket-Webscript.
This ticket will be stored at the opsoro client and passed with every request. Doing a logout will than mean to delete the ticket.
Are there other opinions?…this is not really one of my strong points…
Cheers, Jan