implement forget_me! for controller

forget_me! is called when logout (not by timeout)
Hash#merge! is faster than Hash#merge