Fix the DELETE /session endpoint.