clean old session on SecureAuthTestCookieMiddleware