Failed session check should remove the cookie