add logout and session invalid