Fix session destroy action (was in user controller instead of session)