added example session invalidation code