expire the session cookie at the end of the browser session