destroy the session cookie