add specs for cookie removal, and use cookie.delete instead of assigning it nil value