since sessions was added, destroying a logged in user needed to be modified by setting the session user id to nil