destroys session
needs javascript so jquery can handle the signout link action