removing last trace of session stuff (not needed anymore with tokens)