removes parse credentials out of browser, updates session schema