add logout hook to remove keys from session