Session DELETE changed to GET request