{"action":"opened","issue":{"url":"https://api.github.com/repos/deitch/cansecurity/issues/7","labels_url":"https://api.github.com/repos/deitch/cansecurity/issues/7/labels{/name}","comments_url":"https://api.github.com/repos/deitch/cansecurity/issues/7/comments","events_url":"https://api.github.com/repos/deitch/cansecurity/issues/7/events","html_url":"https://github.com/deitch/cansecurity/issues/7","id":53235325,"number":7,"title":"cansec.clear doesn't seem to work","user":{"login":"socketwiz","id":718481,"avatar_url":"https://avatars.githubusercontent.com/u/718481?v=3","gravatar_id":"","url":"https://api.github.com/users/socketwiz","html_url":"https://github.com/socketwiz","followers_url":"https://api.github.com/users/socketwiz/followers","following_url":"https://api.github.com/users/socketwiz/following{/other_user}","gists_url":"https://api.github.com/users/socketwiz/gists{/gist_id}","starred_url":"https://api.github.com/users/socketwiz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/socketwiz/subscriptions","organizations_url":"https://api.github.com/users/socketwiz/orgs","repos_url":"https://api.github.com/users/socketwiz/repos","events_url":"https://api.github.com/users/socketwiz/events{/privacy}","received_events_url":"https://api.github.com/users/socketwiz/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-01-02T02:50:58Z","updated_at":"2015-01-02T02:50:58Z","closed_at":null,"body":"Either cansec.clear isn't working or I'm not understanding what it is supposed to do.  I'm using cansec with restify: https://github.com/mcavage/node-restify not express and for the most part its working great.  What I really like about cansec is step number 2 in your docs about \"how authentication works\":\r\n\r\n>Was there an X-CS-Auth header? If so, validate using the auth header.\r\n\r\nSo I authenticate once with a username/password, then I use the X-CS-Auth header that is returned to authenticate the remaining requests.  This works very well.  It will even timeout after the default of 15 minutes and I'll need to re-authenticate with the username/password.  However, now I'm trying to setup a logout action.  From the docs I see:\r\n```javascript\r\napp.get(\"/logout\",function(req, res){\r\n    cansec.clear(req, res);\r\n    res.send(200);\r\n});\r\n```\r\nI've implemented this and it runs without error, but after I run it, I was expecting my X-CS-Auth requests to fail and require a new login with username/password...however it does not.  Is this a misunderstanding on my part, am I doing something wrong, or is this possibly a bug?"}}