make sure we destroy the session in db too