REST API for logging out

We have an application that launches Spotfire for reporting, passing user identity via a token to a custom authentication filter within Spotfire. We have no way for the application to log out of Spotfire once it's opened an analysis for a user. We can't simply call the logout.jsp page because the application runs from a different domain than Spotfire - so calls to logout.jsp don't include the session tokens because of cross site restrictions.

We need a simple REST compliant API for logging out that supports CORS headers. This could likely be achieved by implementing a method for defining CORS headers within the Spotfire server, which is also probably useful for other APIs that currently will fail when called cross-domain.