How do I allow for logging out?

Logout is available from 3.3 onwards, but it is disabled by default. To enable add this line to $instance/etc/overrides.zcml:

<adapter factory="zope.app.security.LogoutSupported" />

The default login manager uses very basic HTTP authentication (using the user/passwords defined in $instance/etc/principals.zcml). For more advanced authentication and user management you'll need to use authentication with a form of session managment. See for example How do I use cookie based sessions?.

Note: Update this page, if this answer is not sufficient.