marking logged out when session expires