handle client-side session when user is removed from DB

add `logOut` to `sessionController`
add `bandangoUnauthorizedHelper`
changed error message when login failed