let the user destroy sessions