hooked a DELETE /session api