Environment: Production

Signing out did not always terminate your session with the identity provider. On a shared or kiosk device, the next person could be admitted as you.

Each environment now signs you out against its own identity pool, and the app warns loudly if it is ever deployed without that configured. Deactivated and rejected accounts also lose access to the app immediately, which previously only applied to suspended and inactive ones.