When I click log out, I know I'm logging out on this
  browser but not other browsers.

Different browsers get different sessions.

  ... it doesn't limit you from storing and checking
  things on the server-side.

Correct, but you basically end up reimplementing parts of ActiveRecord::SessionStore anyway.