delete old session on server-side after expiration