to avoid 'invalid csrf token' responses on login, we should clear cookies on logout, and on 401 responses.
to avoid 'invalid csrf token' responses on login, we should clear cookies on logout, and on 401 responses.