in src/main/java/org/apache/sling/auth/xing/login/impl/XingLoginAuthenticationHandler.java [246:260]
protected void deleteCookies(final HttpServletRequest request, final HttpServletResponse response) {
final Cookie[] cookies = request.getCookies();
if (cookies != null) {
for (final Cookie cookie : cookies) {
final String name = cookie.getName();
logger.debug("cookie found: '{}'", name);
if (name.equals(xingCookie) || name.equals(userCookie) || name.equals(userIdCookie)) {
logger.debug("deleting cookie '{}' with value '{}'", cookie.getName(), cookie.getValue());
cookie.setValue(null);
cookie.setMaxAge(0);
response.addCookie(cookie);
}
}
}
}