delete session correctly