Including that tag on any page - forum, blog, whatever, will log you out without your consent. For comparison, Facebook has cross-site request forgery protection for logging out