allow user to kill off any session that might exist when something hits the server without the CSRF token