unset session on logout