Ensure session cookie is removed on logout