session can be destroyed now