fix: sign out when user token invalid

[Yuan325]

when the user token is invalid, signout to clear the session instead of just clearning session['user_info'].