clear session and redirect to login