add logout feature to the SessionController