added unset($_SESSION) and removed self::regenerate_id() in destroy()