Merge "OAuth: Check for session validity during logout" into stable-2.10

gerrit-oauth/src/main/java/com/google/gerrit/httpd/auth/oauth/OAuthLogoutServlet.java

@@ -52,6 +52,8 @@ class OAuthLogoutServlet extends HttpLogoutServlet {
   protected void doLogout(HttpServletRequest req, HttpServletResponse rsp)
       throws IOException {
     super.doLogout(req, rsp);
+    if (req.getSession(false) != null) {
       oauthSession.get().logout();
     }
   }
+}