add destroy action for sessions controller