ensure that all previous sessions are destroyed on logout