Remove user object from session on logout

When user gets logged out, user object remains saved in session. This can produce unexpected behavior.