Fix EZP-22751: DELETE /user/sessions/<id> does not remove the session cookie

https://jira.ez.no/browse/EZP-22751