session.php handles logout & session creation