Session creation and destruction through user login/logout