fixed logout, session now properly destroyed