From the article:

the nice thing about this is that the browser will keep sending the credentials to subsequent requests of the same domain until it receives a 401 status as response.

The logout button can simply redirect to a static page that returns a 401.