Session in browser not removed after logout