cookieauth: fixed redirect after guest account session expire