When destroying the session cookie, consider cookie domain and path.

This fix the problem the session cookie aren't deleted if cookie domain and path has set.