keycloak: temporarily allow logout w/ redirect_uri

Keycloak 18.0.0 disallows this by default; enable the legacy behavior
temporarily. When this stops working, we should consider removing the
'redirect_uri' parameter entirely. Should also check if GitLab and/or
Grafafa have implemented support for alternative ways of signing out:

2 jobs for master in 36 seconds (queued for 1 second)