use session.destroy instead of deleting session objects directly.