correct breakage
don't set permanent cookie, kill session if it conflicts
comment out missing test