end APM session on browser close

I managed to get this (almost) working with the iRule bellow:

when ACCESS_ACL_ALLOWED {
    switch -glob [HTTP::header value "User-Agent"] {
        "Microsoft Office*"  - 
        "MSFrontPage*" -
        "Microsoft-WebDAV*" {
            return
        }
        default {
            set ::sess_verify [ACCESS::session data get session.custom.verify]
            log local0. " ::sess_verify variable set to [ACCESS::session data get session.custom.verify] "
            if { $::sess_verify == 1} {
                if { [ACCESS::session exists -state_allow]} {
                    if { [HTTP::cookie exists "SessionCheck"]} {
                        return
                    } else {
                        ACCESS::session remove
                        HTTP::respond 302 Location "/vdesk/hangup.php3"
                        return
                    }
                }
            }
        }
    }
}

when HTTP_RESPONSE {
    HTTP::cookie insert name SessionCheck value [ACCESS::session data get session.user.sessionid] path / domain era.europa.eu
    HTTP::cookie secure SessionCheck enable
    ACCESS::session data set session.custom.verify 1
}

But we still have an issue as a user needs to reopen the browser so that the APM clear its session. So office documents remains accessible in the mean time, which is a security issue.

Do you guys have a working example of using a javascript? the example above seems to me not complete (I'm not a javascript expert)