Just delete
it.
For example:
function logout (req, res, next){
delete req.session['user'];
res.redirect(302,'/');
};
Obviously if you are deleting things subsequent middleware expects to be present you may have issues.
You can read the doc on delete here.