fix issue in blacklist_session_endpoint.rb