Expired/invalid sessions should be deleted from the database in addition to being unlinked