remove every session key when not logged in.