Updated for session nulling

Regens session id on login
Destroys session on logout