added token delete on session destroy