Describe the bug

Currently the XML OpenID sample uses GET /logout, which doesn't work since the DefaultLogoutPageGeneratingFilter is skipped for OpenID.

To Reproduce

Start up the OpenID sample, navigate to http://localhost:8080, specify an OpenID provider to log in with, and then click Logout. The result is a 404.

Expected behavior

Logout should take the user back to the entry point. Specifically, it should POST to the /logout endpoint and include the _csrf parameter.