$data is always present
no longer destroy sessions
verifier only needed for some adapters
Merge pull request #40 from pmjones/develop-2

no longer destroy sessions