destroy session when logging out.