recover from bad CSRF tokens without requiring a hard refresh of the browser

app/controllers/session_controller.rb

@@ -67,7 +67,7 @@ class SessionController < ApplicationController
   end
 
   def destroy
-    session[:current_user_id] = nil
+    reset_session
     cookies[:_t] = nil
     render nothing: true
   end