Prevent session fixation, graceful session_destroy()