Remove cookies before authenticating

Remove all cookies before user can authenticate. Also allow him to visit
any page (so he can login using Shibboleth etc.).