revokeToken(); session_destroy(); header('Location: ..'); exit();