fix user_session#destroy