Token doesn't release after user logout.

[wzhx78]

we are doing picketlink performance test, and we had found when we access different web application using picketlink as our IDP. it will create token for each of web application. but when user global logout, it only remove latest access web application token, so it will cause memory leak after running a moment.

we had changed picketlink source code to try to fix this problem. please check following gist.

https://gist.github.com/wzhx78/5418944

https://gist.github.com/wzhx78/82ea9858823fe40cc50f

https://gist.github.com/wzhx78/5418906

[anilsaldhana]

Have you considered sending pull requests?