reset user and hasValidSession when signout