in src/main/java/org/apache/sling/auth/xing/oauth/impl/XingOauthAuthenticationHandler.java [227:230]
public void dropCredentials(final HttpServletRequest request, final HttpServletResponse response) throws IOException {
logger.debug("drop credentials");
removeAuthFromSession(request);
}