terminate session via api