Fix cookie removal at logout.

vispa/controller/root.py

@@ -252,15 +252,16 @@ class RootController(AbstractController):
     @cherrypy.expose
     @cherrypy.tools.method(accept="GET")
     def logout(self, path="/"):
-        # remove some cookies
-        cookies = ["ROUTEID"]
-        for c in cookies:
-            if c in cherrypy.response.cookie:
-                cherrypy.response.cookie[c]["expires"] = 0
-
         vispa.fire_callback("user.logout", cherrypy.request.user)
         vispa.socketbus.remove_session(self.get("window_id"))
         cherrypy.lib.sessions.expire()
+
+        # remove all cookies
+        for key in cherrypy.response.cookie.keys():
+            cherrypy.response.cookie[key] = ""
+            cherrypy.response.cookie[key]["expires"] = 0
+            cherrypy.response.cookie[key]["max-age"] = 0
+
         raise cherrypy.HTTPRedirect(vispa.url.dynamic(path))
 
     @cherrypy.expose
@@ -273,7 +274,7 @@ class RootController(AbstractController):
             "welcome_phrase": vispa.config("web", "text.welcome", ""),
             "username": None if not isinstance(user, User) else user.name,
             "hash": hash,
-            "cache_bust"      : self.cache_bust
+            "cache_bust": self.cache_bust
         }
         return data