changed logout. it removes everything from session