grab the session id, use the get_user_by_session method to find the session and destroy it