session_destroy not useful,
because every request session_start is called