When an authenticator cookie is discarded, I think it would improve safety if it was removed from the cache as well.