Thanks for information.

Everything is coming and going from the same domain, only different sub-directories. The sessions are timed and clicking 'logout' will overwrite the cookies.