Added clearSession() to clear all session data (not cookies)