Bugfix: Immediately remove request.user when ping fails

Fix bug where failing ping was not invalidating session immediately, only on the second request.