Always use Response#unset_cookie