correctly invalidate cookie