From 50846595c8209829313e0fdd02da4ddf95c1a049 Mon Sep 17 00:00:00 2001
From: Richard van den Berg <richard.vandenberg@ncsc.nl>
Date: Tue, 16 Jul 2019 11:56:56 +0200
Subject: [PATCH] Destroy the CakeSession, not the php one. Fixes #4808

---
 app/Controller/AppController.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/Controller/AppController.php b/app/Controller/AppController.php
index 792b088d8..054240607 100755
--- a/app/Controller/AppController.php
+++ b/app/Controller/AppController.php
@@ -505,7 +505,7 @@ class AppController extends Controller
             echo json_encode($this->Log->getDataSource()->getLog(false, false), JSON_PRETTY_PRINT);
         }
         if ($this->isApiAuthed && $this->_isRest()) {
-            session_destroy();
+            $this->Session->destroy();
         }
     }