When destroying the session cookie, consider cookie domain and path.

This fix the problem the session cookie aren't deleted if cookie domain and path has set.
Merge pull request #1592 from ka2n/session_cookie_domain_path

When destroying the session cookie, consider cookie domain and path.