fix: DELETE /api/v0/sessions/current confused with /api/v0/sessions/:id