Forum SSO `token` cookie: re-signed every request, logout clear misses the domain variant #152