added logout and destroy route on sessions_controller