updated sessions helper and controller for session destroy, added spec to test same