Fixed a bug when a user's token was not being deleted.

The token was being deleted on the server, and a cookie was being returned to delete it on the browser. However, a second cookie was being returned to the browser which did not have an expiration, therefore the token was being re-saved the browser.