set session username to null in log-out