Cookie should be delete onUserLogout

setcookie($hash, false, time() - 86400, $cookie_path, $cookie_domain);