Bigger changes

gave up trying to save session into database.
added logout functionality to kill the session