FIX: multiple cookie values - erasing sessions.

Previously, there was two Set-Cookie headers one with NAME="" as the value. This came from destroying the prior session, but may be emitted second which erased the first cookie for the session.