## sessions controller
  def destroy
    self.current_user.forget_me if logged_in?
    cookies.delete :auth_token
    reset_session
    flash[:notice] = "You have been logged out."
    redirect_back_or_default('/')
  end

## routes.rb
  map.logout '/logout', :controller => 'sessions', :action => 'destroy'