auth cookie less eager to reset auth token, log everyone out