did you load the success page at least once after adding the code?
if you just add the session destroy code to the success page, and don't load it, it wont destroy the session, it needs to load at least once after it has been added before you test an order.