added 'session_start()' and session destroying code