adding support for invalidating sessions