auth session destroy done