sign out also on server-side