end APM session on browser close

In the absence of ANY consistent event, there are very few options other than maybe shortening the access policy idle timeout. You could, theoretically, send HTTP responses with a tiny piece of JavaScript that continually "pings" the VIP, and then significantly shorten the idle timeout, but that of course would add a lot of additional traffic.