wipe out the value of the session data in addition to setting expires header in past on destroy