title: How to invalidate specific session at logout in Rails /w Devise?
body: <p>I want to invalidate the session when a user logs out using Devise, i have a callback to catch when a user logs out, for more protection against session hijacking. </p>
  
  <pre><code>class ApplicationController &lt; ActionController::Base
    def sign_out(*args)
      super(*args)
      reset_session
    end
  end
  </code></pre>
  
  <p>My understanding was that this would remove the session info stored on the server side, therefore invalidating it.</p>
  
  <p>However I can still login using the session id I got before signing out. 
  Am I misunderstanding how it works? I only want to invalidate just this session, not all of them.</p>
  
  <p>I am using the default for session_store.</p>