fix regex for login, fix session destroy method name - blame documentation