destroy session for Json-RPC forbiddens