Add act=logout to destroy session