fixing session key to be passed in header for logout, delete