dev: clear cookie when logout