Fix: remove cookie when auto-login failed.