new method to invalidate session