But most apps move away from client-side sessions and use some kind of a session store (in memory, redis, memcache typically). In this case, the session.destro

But most apps move away from client-side sessions and use some kind of a session store (in memory, redis, memcache typically). In this case, the session.destroy should really destroy the session, meaning the user will be logged out (that's as far as I can tell without actually trying it)