helphand: Thank you. That moved me one step closer.
I had defined LOGIN_RUNMODE in invoking the auth object.
But this still is not quite working as expected.
Using the logout button still results in a browser message of:
"Forbidden: You don't have permission to access / on this server."

I have to use the back button to get back into my app
and then only see the login form again when I attempt
to access some other authenticated service.

-- Hugh