This filter should only be in the `SessionsController` and only on the `destroy` action. In fact you probably have some failing integration tests right now.