Session token should be reset when signing out