Invalidating a session using session id