only remove the login details from the session on logout