Log out link currently takes user back to login screen, but the browser back button takes the user back to the main page, with gifts editable.
Similarly, the magic link is still valid.
Can we end the session, and make the magic link expire on session 'log-out'?
We fixed this today @KHill-WMF. When testing this locally, it worked as expected, but in production, it "acted" as if it worked, but it turned out there was a production-only permissions issue that prevented the checksum URL from being correctly invalidated. That has now been fixed.