fix(auth): delete session on logout

SD-239