_SESSION has to be merged into $this->data right before session_start() - otherwise the current state of _SESSION will be lost - as a result logout is not working