never set an expired cookie; on logout, re-login as guest