fix req.route  add handleLogoutRequests

validate ticket in sessionstore