add signout to sessions controller