Why isn't session getting deleted?