only destroy unlogged sessions