made sessioninvalidation working