images may be cached by the browser from a previous request.
even non authenticated users have a session id unless they have cookies disabled, so logging out would not change the session id nor the session cookie, it only affects the authentication cookie.
Hope that helps,
Joe