pub async fn delete_session(pool: &PgPool, token: &str) -> AppResult<()>
Ends a web session (sign-out); recorded as user.sign_out. An unknown or already ended session is not an error and leaves no entry.
user.sign_out