logout is completed, destroys user session