<% session.invalidate(); response.sendRedirect("login.html"); %>