New route: DELETE session -> logout