Allow users to delete their current session

[cdriehuys]

Users should be able to logout of a cookie based session by sending a DELETE request to /authentication/sessions/current/.

Acceptance

1. An authenticated user's session should be ended after sending a request to the endpoint.
2. Hitting the endpoint as an unauthenticated user should be a no-op.