logout when session is invalidated