If the cookie is invalid, send an expired cookie value

If a user's browser has a mod_auth_cas cookie that is not mapped to a valid cache file, currently it redirects in a loop back to CAS and the application. This PR expires the cookie before sending the user back to CAS so they're forced to get a new mod_auth_cas cookie when they return.