Use sess.Destroy() for logout.

api/auth.go

@@ -76,7 +76,8 @@ func CheckAuthed(c *fiber.Ctx, needs_admin bool) (*session.Session, error) {
   admin := sess.Get("admin") == true
   authed := sess.Get("authenticated") == true
 
-  log.Printf("session admin=%v, session authed=%v, needs_admin = %v", admin, authed, needs_admin)
+  log.Printf("session admin=%v, session authed=%v, needs_admin = %v",
+    sess.Get("admin"), sess.Get("authenticated"), needs_admin)
 
   if needs_admin {
     authed = admin && authed
@@ -96,7 +97,9 @@ func LogoutUser(c *fiber.Ctx) error {
   sess, err := STORE.Get(c)
   if err != nil { return err }
 
-  sess.Set("authenticated", false)
+  err = sess.Destroy()
+  if err != nil { return err }
+
   err = sess.Save()
   return err
 }