only logout if we've established a session