Logout should only expire current session