Invalidation of cookies does not work

[nItroFreeZer]

Hi there

In the NullifyTokens() func you want to delete / invalidate the authCookie and refreshCookie.
Unfortunately this does not work if the cookie has no value for the path attribute. The browsers ignores the Set-Cookie headers and the cookies are preserved.

Kind Regards

[adam-hanna]

Sorry, I'm just seeing this, now. Thanks for the report.