The only thing that makes sense to me is that the signout API we have defined is not getting called.. did you override / disable the sign out API by any chance