[rules-users] How do sessions get removed from the database ?