Instead of waiting for the cookie to go away, you could just set it to an invalid value. This should be easy to implement with any name / pass combination.