in src/main/java/org/apache/sling/auth/form/impl/jaas/FormLoginModule.java [99:102]
protected void clearState() { userId = null; super.clearState(); }