If the idea of these lines is to nuke the session, seems like that is more idiomatically done like this:

`req.session = null;`

http://expressjs.com/api.html#cookieSession