Hi Jeremy - unfortunately this is not like Google services. When I click "log out" from Google or other services, my session ID is terminated on the server side so the encryption hash is no longer valid without reauthenticating my credentials. Additionally, even after I close all browsers I can still log into the systems without passwords being re-entered. This is a security issue (whether the flaw is from design or through breach) where a user terminated session is not requiring a new session cookie or authentication. If someone selects "logout" and closes browsers, there is reasonable expectation that the system would require a username and password to regain access.

I agree with Jeremy. I think you are misunderstanding two scenarios: login into a service (e.g. google.com, odoo.com,...) and delegating the authentication to another service (stackoverflow.com, myinstance.odoo.com,...). In the first case you are actually connected to the main service, when you logout, your are out of the service (simple). In the second case, it's another service that is responsible to identify you (when you login into stackoverflow.com, you can delegate the authentication to google, facebook, yahoo,...; on myinstance.odoo.com, you can delegate to odoo.com, google,...). As the authentication service and the logged services are two different things, they are independent. If you used Google to login onto Stackoverflow, loging out of stackoverflow will NOT kick you out of gmail or other Google services. For odoo it's the same: if you are logged into alice.odoo.com and bob.odoo.com with the same odoo user, logging out of alice.odoo.com should not log you out of bob.odoo.com or odoo.com. By the way, with auth_oauth plugin, you can change your server to use google instead of odoo.com to authenticate you if you wish to do so.