Three tests: happy path POSTs to backend with the session cookie and clears both fa_session and legacy auth_token; cookies are cleared even when the backend call rejects (best-effort logout); skips the backend call when no session cookie is present. Addresses PR #612 / Sara S1. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>