added manual session destroy and cookie clear in logout route