So, you could decide to call

resetStore

after login instead of logout, because then you at least have authentication, and all of your queries should actually return data. But that does leave the data cached after logout, so you need another method to make sure no data gets exposed.