Sessions#destroy

Closes #5 and #6.
"destroy" requires an `:id` present in the route, not needed here.