Can now destroy sessions. Renamed the route 'login' to 'auth'