httpd: rather clear cookies with expires=epoch than expires=-2days

less browser-clock-dependant and avoid a likely-to-be-bug in qupzilla