Make sure to invalidate device token after session destroy.