From e6fa91a4a479415dcf350117b8cdbe4b3c2014ec Mon Sep 17 00:00:00 2001
From: Julian Lam <julian@nodebb.org>
Date: Tue, 21 Jun 2016 21:02:07 -0400
Subject: [PATCH] when logging out, end the express session

---
 src/controllers/authentication.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/controllers/authentication.js b/src/controllers/authentication.js
index bc2369bd62..2cc635b80c 100644
--- a/src/controllers/authentication.js
+++ b/src/controllers/authentication.js
@@ -307,6 +307,7 @@ authenticationController.logout = function(req, res, next) {
 				return next(err);
 			}
 			req.logout();
+			req.session.destroy();
 
 			user.setUserField(uid, 'lastonline', Date.now() - 300000);