session expires as soon as user closes browser. If you want to end session before that then add logout url somewhere on your page. html code would be <a href="?logout=1">Logout</a>
Note that user will be redirected to url specified in LOGOUT_URL (see password protect.php where it is defined)
details here
adding logout link