fixed logout, cookie had different path, not /