Logout destroy session

server/server.js

@@ -333,8 +333,10 @@ async function setupAuth()
 		}
 
 		req.logout();
+		req.session.destroy(function (err) {
 			res.send(logoutHelper());
 		});
+	});
 
 	// callback
 	app.get(