remove login when session expires