added destroy method to sessions controller
added sign_out route