when login fails due to outstanding confirmation required, make sure any created session is cleared