You don't have to! If you've set it all up correctly, you will have somehow marked the user (using a cookie, or some server storage keyed by session ID) as logged out. Then, when the user attempts to do something involving login, your program will see that they are logged out, and tell them to log in again.