title: Logging users out with basic authentication?
body: <p>I've searched around and there doesn't seem to be a non-hacky way to clear the user credentials from the browser using basic authentication.  </p>
  
  <p>I'm building a WebAPI with an HTML client that accepts username/password - if the user logs in, they should certainly be able to log out as well, or the system should automatically log out after a certain time period.  </p>
  
  <p>Is there any standard way to accomplish this with Basic Auth (over SSL), or should I start looking into other forms of authentication?  </p>
  
  <p>Edit: looking into the SimpleMembershipProvider, would there be anything "wrong" with extending the Membership table with an "IsLoggedIn" property that I can toggle and check with every request?  If they click logout, then I redirect to the login page and return 401 Unauthorized unless they submit their credentials again.  Does this sound ok?</p>