It’s clearing the token and user properties in app but when it goes and call the Web Mobile API browser is using the cached credentials and refreshing …