trying to destroy session cookie with timeout