Log off routine fails in session state is disabled

[burningice2866]

Log off routine fails in session state is disabled due to a missing null-check here

https://github.com/burningice2866/CompositeC1Contrib.Security/blob/master/Security/Web/ResponseHandler.cs#L59

Workaround is to ensure enableSessionState in web.config is set to true