docs: add logout to session except list

[datamweb]

Description
The duty of session is to protect URLs. I think devs should know that there is no reason to protect logout. That's why I think we don't need to change the code.
I have already added this topic #642 .

fix #920

Checklist:

• Securely signed commits
• Component(s) with PHPDoc blocks, only if necessary or adds value
• Unit testing, with >80% coverage
• User guide updated
• Conforms to style guide

[datamweb]

Also, there is no reason for a user who is not logged in to have access to /logout.
This issue must be resolved.

/**
* Logs the current user out.
*/
public function logoutAction(): RedirectResponse
{
+// block route logout if see beforlogin
+if (!auth()->loggedIn()) {
+throw PageNotFoundException::forPageNotFound();
+}
// Capture logout redirect URL before auth logout,
// otherwise you cannot check the user in `logoutRedirect()`.
$url = config('Auth')->logoutRedirect();

auth()->logout();

return redirect()->to($url)->with('message', lang('Auth.successLogout'));
}

shield/src/Controllers/LoginController.php

Lines 91 to 100 in 50fb634

	public function logoutAction(): RedirectResponse
	{
	// Capture logout redirect URL before auth logout,
	// otherwise you cannot check the user in `logoutRedirect()`.
	$url = config('Auth')->logoutRedirect();
	auth()->logout();
	return redirect()->to($url)->with('message', lang('Auth.successLogout'));
	}