if signin_required fails, kill the session