Safe handling of auth cookie on logout