signout functionality that invalidates session for superadmin and admin