Added logout for users, also invalidate session when logout.