add logout (destroy) session