terminating PAM session management