Pass session id as header on each request
Delete session on logout