added a couple of req.session destorys in