updated endsession URL