fix debug printout on open redirect prevention
cleanup in-memory crypto context on shutdown
use default of "/" for OIDCCookiePath
use FQDN for sample hostname since Google requires that
disable OIDCMetadataDir in sample config since it may be overlooked
clear session cookie after cache miss
clear session cookie when corrupted
POST->GET in JMeter test script