delete cookie when auth failed