diff --git a/LocalSettings.php b/LocalSettings.php
index 241683b..1ca91f2 100644
--- a/LocalSettings.php
+++ b/LocalSettings.php
@@ -628,6 +628,10 @@ function loadenv($envName, $default = "") {
     wfLoadExtension( 'SimpleSAMLphp' );
     $wgSimpleSAMLphp_InstallDir = '/var/www/simplesamlphp';
     $wgPluggableAuth_EnableLocalLogin = false;
+    # allow background post request logout instead of requiring an additional
+    # user form post submit click. Seems to work despite possible
+    # incompatibility with SLO noted in docs.
+    $wgPluggableAuth_EnableFastLogout = true;
 
     $wgPluggableAuth_Config['CWL Log In'] = [
         'plugin' => 'SimpleSAMLphp',
diff --git a/README.md b/README.md
index e4e57bb..2e42337 100644
--- a/README.md
+++ b/README.md
@@ -134,7 +134,7 @@ the docker compose dev environment.
 To generate your own cert and key:
 
 ```bash
-openssl req -newkey rsa:3072 -new -x509 -days 3652 -nodes -out wiki-sp.crt -keyout wiki-sp.pem
+openssl req -newkey rsa:4096 -new -x509 -days 3652 -nodes -out wiki-sp.crt -keyout wiki-sp.pem
 ```
 
 The key and cert can replace the ones in `docker/simplesamlphp/sp/cert/` which