Why do a user need both sessionToken and sessionId for logout?

Original message was deleted