code: protected void handleLogoutEvent(LogoutEvent event)
      {
          clearUser();
          Authentication auth = (Authentication) event.getSource();
          propertyChangeSupport.firePropertyChange(USER, auth, null);
      }
docs: When a logout occurs, remove all user related information from the
  session.
  
  @param event
  the logoutEvent that triggered this handler.