Also remember that "delete this cookie" is merely a request, and can be ignored.

If the purpose of a cookie has been completed, you'll need to change server-side state to ignore that cookie. Sending the "delete cookie" is merely a convenience, and should not be a mandatory part of your security policy.

-- Randal L. Schwartz, Perl hacker
Be sure to read my standard disclaimer if this is a reply.