remove session[isAdmin]