Only consider OTRSBrowserHasLogin cookie for login redirect

and delete it afterwards
Avoid session ID in the URL for the customer frontend