reset session on logout