destroy session on logout
show user in view